Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133312e302f32342d3234203d3e20313439353733.roa
File: 3139352e35382e3133312e302f32342d3234203d3e20313439353733.roa (raw, json)
Hash identifier: DvYJ6q7UxYHHSmlPslRDh1UFGrf2ySAjy+1hbrYwgrg=
Subject key identifier: F4:4E:96:14:7E:B0:BC:0C:33:CC:36:00:BF:B5:02:A9:95:08:4A:76
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4BE34809811CECC6CB271ABCB9B544CE2DF1E39F
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133312e302f32342d3234203d3e20313439353733.roa
Signing time: Mon 07 Sep 2026 06:08:21 +0000
ROA not before: Mon 07 Sep 2026 06:03:21 +0000
ROA not after: Mon 06 Sep 2027 06:08:21 +0000
asID: 149573
IP address blocks: 195.58.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e3:48:09:81:1c:ec:c6:cb:27:1a:bc:b9:b5:44:ce:2d:f1:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 7 06:03:21 2026 GMT
Not After : Sep 6 06:08:21 2027 GMT
Subject: CN=F44E96147EB0BC0C33CC3600BFB502A995084A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:ac:f0:10:6b:61:6a:e1:90:95:24:3c:47:
45:77:26:e9:65:95:12:4c:d0:a9:1f:00:78:21:a0:
f7:10:01:fd:4c:9a:98:b0:d0:c8:66:43:61:3b:4b:
87:64:17:2d:49:c0:5b:1d:4d:71:c4:fe:bc:35:da:
63:3a:b9:8d:c3:44:56:01:4f:ab:e7:5c:62:95:91:
59:ce:36:83:52:28:10:58:4e:37:da:9c:f0:51:47:
f1:b3:8a:4c:1e:b1:cc:31:68:61:50:cd:29:36:3d:
f9:0c:12:f2:cb:1e:ef:59:ab:09:ef:09:97:ce:3a:
b2:e1:b0:6b:b8:b2:00:7a:06:1b:77:b9:45:14:cc:
51:e8:5c:c7:3c:f8:92:bb:9a:cd:d7:16:66:67:35:
9a:7f:aa:b4:c6:5d:eb:b1:91:ff:06:ea:8a:cf:1d:
a6:11:cc:48:e0:5a:93:51:3a:6f:e0:1b:46:61:f0:
e0:26:db:f4:7c:5c:4c:dd:f6:34:d4:65:ce:97:33:
55:15:50:82:c7:f5:b9:bc:73:33:0f:3f:05:c9:29:
a0:53:5f:8c:82:c9:19:10:6c:58:45:44:9e:21:c4:
53:39:5b:55:d1:75:0f:9e:4f:7a:ee:12:e8:d9:d1:
24:f8:f8:fa:43:75:60:c6:8c:4b:6e:4e:47:96:15:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:96:14:7E:B0:BC:0C:33:CC:36:00:BF:B5:02:A9:95:08:4A:76
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133312e302f32342d3234203d3e20313439353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c1:1f:06:5d:2d:d1:6d:b5:59:ae:ce:01:0a:a4:ad:8c:5c:
ed:26:51:f6:19:fe:2a:16:38:e6:e7:74:86:0b:e8:da:a8:64:
c0:e4:04:61:0d:a9:ec:2f:02:24:00:82:56:62:5f:ec:4b:89:
d4:03:81:d2:31:7c:ec:b1:01:39:53:10:cc:24:87:ca:69:33:
68:0b:f5:87:13:01:17:18:11:ea:33:bc:ac:de:90:dc:a0:1a:
33:6e:7f:e7:01:80:01:13:2d:10:4a:7a:fd:ff:a4:a5:0a:a2:
89:2a:00:10:61:81:e8:9a:7f:db:70:31:ad:5f:85:7a:37:17:
76:19:47:44:a3:6e:cb:66:b5:63:a3:80:18:7b:30:c2:b1:67:
33:9a:01:11:77:71:2b:e1:9d:61:1c:62:a5:05:f9:07:9b:70:
3e:ab:75:a5:58:9e:28:46:84:e5:5e:7f:0d:f5:1f:c8:3e:a1:
31:bc:7e:1e:8e:59:21:fd:0c:93:46:fb:15:87:cc:f0:04:d4:
d3:1d:79:31:a2:e1:41:cd:bc:b4:7e:99:c0:0f:83:bc:89:70:
d6:de:e4:1c:3d:27:74:20:58:78:64:d0:61:8b:7b:71:bf:95:
ee:70:6e:74:50:31:06:90:35:46:8c:22:6e:8d:2f:69:7b:3c:
b0:fe:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:29:40 2026 by rpki-client